Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: X2VscbvZl4kOwm8Iv6HoqKPtQoTNe09YBDI7ZmKwLSM=
Subject key identifier: 50:96:28:7D:2E:1E:87:81:AD:0F:9D:9D:90:4C:B8:0D:A1:F2:76:B2
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019D2A04C0E4047EDE8D69F34FEE219E2D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0ABA
Signing time: Thu 26 Mar 2026 12:00:47 +0000
Manifest this update: Thu 26 Mar 2026 12:00:47 +0000
Manifest next update: Fri 27 Mar 2026 12:00:47 +0000
Files and hashes: 1: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: 8igXA0CvylZ+Was7iEmlnLZMdoky3mDHPFr9fdfgkjA=)
2: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (hash: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=)
3: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c0:e4:04:7e:de:8d:69:f3:4f:ee:21:9e:2d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Mar 26 12:00:47 2026 GMT
Not After : Mar 27 12:00:47 2026 GMT
Subject: CN=5096287d2e1e8781ad0f9d9d904cb80da1f276b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:a0:b5:e6:a8:a7:0e:19:e2:ff:98:f2:ec:
9a:e0:a8:bb:5e:38:17:b8:96:b1:61:45:0c:14:42:
87:00:92:26:48:47:53:db:f3:1e:b8:bd:9d:89:b1:
91:da:4d:36:09:d2:0b:2f:79:cb:96:c6:f3:22:bc:
61:d5:1c:17:36:80:8e:db:7b:81:36:20:d6:bb:bd:
ef:41:ba:19:93:38:a8:67:63:d3:32:51:82:21:35:
28:42:9d:be:62:58:d2:d2:bb:1c:d4:01:a3:8c:a6:
f8:33:4d:34:73:f1:6a:84:10:45:ca:ae:de:ab:d3:
b5:f3:90:ea:42:7a:a4:96:6e:e9:e7:3a:dd:35:d8:
9b:ab:c3:50:30:b4:a5:e9:5d:d1:1a:34:aa:54:f3:
27:f4:4e:1a:e8:6e:12:79:86:c3:f3:e5:c2:da:21:
66:03:46:12:90:27:fd:1f:4b:63:fc:af:09:d0:11:
3a:ae:e0:6a:21:61:99:11:f7:36:bb:eb:93:0b:ce:
61:0c:3d:ae:89:94:9c:5b:39:f8:73:93:a0:ca:6e:
8a:5e:37:35:61:eb:b9:35:18:27:75:c9:81:38:12:
b0:fb:d5:b4:48:a1:8d:61:f7:c5:35:42:60:9a:ae:
3e:31:64:a7:76:00:80:6b:53:ea:e0:36:03:90:36:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:28:7D:2E:1E:87:81:AD:0F:9D:9D:90:4C:B8:0D:A1:F2:76:B2
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:c7:1f:c9:ba:c1:f1:39:f2:56:1e:70:64:8a:cf:b2:cd:
5f:89:f2:ed:90:25:50:88:f3:f8:0e:ac:7d:1d:2b:6d:16:45:
ee:09:96:6b:61:11:e0:93:74:89:7d:2e:64:21:1f:16:d8:10:
03:4d:d6:cf:5a:58:ad:8a:a5:67:55:88:34:a2:91:6e:de:ee:
8f:44:58:64:84:e0:aa:06:44:8f:8e:9a:2d:62:75:a2:a9:c5:
2e:c7:b6:da:93:76:14:63:3f:15:ea:d0:6f:85:f4:c0:be:be:
92:39:55:45:fb:e0:ca:3f:44:b1:21:66:b2:8f:e5:ce:fb:8c:
10:35:a9:89:39:29:2c:90:4d:15:d6:bc:78:f3:6d:cc:b9:44:
f8:e0:f0:e4:79:f8:1d:06:23:e5:42:1e:13:c7:51:7e:44:88:
31:00:63:68:b2:ae:0f:ee:ba:3f:58:29:64:f0:ad:95:1d:53:
f0:4e:d2:84:ce:4a:61:84:6b:5d:f5:ea:c8:de:8b:4b:4e:e5:
d4:88:6a:8f:d2:da:1a:a5:76:d9:64:9a:cc:51:be:33:ab:23:
15:e0:f2:4c:44:46:f6:20:1b:16:23:64:21:a6:91:bc:d0:28:
1f:2f:80:cb:bb:61:9c:ba:b1:e8:e6:04:28:dc:09:32:6f:06:
b5:cc:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:00 2026 by rpki-client